CiliumEndpoint is the status of a Cilium policy rule.
4 top-level fields, 1 required · last changed in Cilium 1.13.0
APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
EndpointStatus is the status of a Cilium endpoint.
Controllers is the list of failing controllers for this endpoint.
Configuration is the controller configuration
Retry on error
Base error retry back-off time Format: duration
Regular synchronization interval Format: duration
Name is the name of the controller
Status is the status of the controller
UUID is the UUID of the controller
Encryption is the encryption configuration of the node
Key is the index to the key to use for encryption or 0 if encryption is disabled.
ExternalIdentifiers is a set of identifiers to identify the endpoint apart from the pod name. This includes container runtime IDs.
ID assigned by container runtime
Name assigned to container
Docker endpoint ID
Docker network ID
K8s namespace for this endpoint
K8s pod name for this endpoint
K8s pod for this endpoint(Deprecated, use K8sPodName and K8sNamespace instead)
Health is the overall endpoint & subcomponent health.
bpf
Is this endpoint reachable
overall health
policy
ID is the cilium-agent-local ID of the endpoint.
Identity is the security identity associated with the endpoint
ID is the numeric identity of the endpoint
Labels is the list of labels associated with the identity
Log is the list of the last few warning and error log entries
Code indicate type of status change Enum: [ok failed]
Status message
state
Timestamp when status change occurred
NamedPorts List of named Layer 4 port and protocol pairs which will be used in Network Policy specs. swagger:model NamedPorts
Optional layer 4 port name
Layer 4 port number
Layer 4 protocol Enum: [TCP UDP SCTP ICMP ICMPV6 ANY]
Networking is the networking properties of the endpoint.
IP4/6 addresses assigned to this Endpoint
NodeIP is the IP of the node the endpoint is running on. The IP must be reachable between nodes.
EndpointPolicy represents the endpoint's policy by listing all allowed ingress and egress identities in combination with L4 port and protocol.
EndpointPolicyDirection is the list of allowed identities per direction.
Deprecated
AllowedIdentityList is a list of IdentityTuples that species peers that are allowed.
DenyIdentityList is a list of IdentityTuples that species peers that are denied.
Deprecated
EndpointPolicyState defines the state of the Policy mode: "enforcing", "non-enforcing", "disabled"
EndpointPolicyDirection is the list of allowed identities per direction.
Deprecated
AllowedIdentityList is a list of IdentityTuples that species peers that are allowed.
DenyIdentityList is a list of IdentityTuples that species peers that are denied.
Deprecated
EndpointPolicyState defines the state of the Policy mode: "enforcing", "non-enforcing", "disabled"
State is the state of the endpoint.
Source: ciliumendpoints.yaml
Changes to CiliumEndpoint (cilium.io/v2) in each Cilium version, compared to the version before it.
1 property has changed the description
Released · View CiliumEndpoint in 1.13.0
2 properties have been added
Released · View CiliumEndpoint in 1.12.2
1 property has changed the description
Released · View CiliumEndpoint in 1.11.0
CiliumEndpoint was already present in this version of Cilium, the oldest one on kubespec.dev
Released · View CiliumEndpoint in 1.6.0
No examples of CiliumEndpoint yet. Contribute one on GitHub.
kubespec.dev